Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: 2bKbDKOu5EPoJSETSEvBj0yA1pN1ziM6iJYOw3J30o0=
Subject key identifier: 57:3E:AE:82:36:73:E3:1F:BD:67:4E:51:7C:04:AF:05:5E:25:EE:2C
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0196BB927C2B1FD598D8A2E3F93828552E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 19:01:01 +0000
Manifest this update: Sat 10 May 2025 19:01:01 +0000
Manifest next update: Sun 11 May 2025 19:01:01 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: YRKtK2uu5b42W608OecBWHpKus78g90nzDiHWWFutbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:7c:2b:1f:d5:98:d8:a2:e3:f9:38:28:55:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: May 10 19:01:01 2025 GMT
Not After : May 11 19:01:01 2025 GMT
Subject: CN=573eae823673e31fbd674e517c04af055e25ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:a7:31:6a:ff:19:3e:11:21:09:dc:64:14:
72:67:1a:a6:b3:51:4c:29:06:37:d6:30:5c:d5:8e:
17:d7:39:c7:b1:48:3a:78:d1:2e:22:ad:3c:f8:f7:
7c:7a:4e:3e:c1:11:72:2e:73:af:bf:59:c4:a6:cf:
07:d1:d0:d0:32:b6:ce:1b:2d:6e:4a:50:50:cd:fc:
3a:84:42:27:04:09:70:24:35:cd:00:50:e6:b9:b4:
e1:00:31:31:13:5c:7a:db:f9:f1:17:21:0f:c0:83:
e8:8f:11:e2:e1:c9:4a:67:04:66:cf:9f:1c:42:da:
47:19:ad:09:13:29:8e:5b:44:f8:13:e5:23:98:9e:
a0:49:ce:a0:a1:a1:5c:0c:ad:82:a1:13:6d:ed:b6:
4e:63:4d:ab:b2:f2:40:a0:46:99:37:69:5c:8d:73:
28:bc:87:d7:e0:a1:34:57:24:aa:bd:a2:09:dd:64:
c8:27:e7:5f:c5:e9:50:06:dd:da:3b:19:47:06:ca:
86:9a:77:6b:a0:f0:47:26:43:c7:c3:c8:b0:70:e3:
d7:c8:ab:7d:1d:65:8f:9b:2d:0c:59:c5:51:09:bd:
4b:4b:a0:4b:b9:be:c5:d2:91:4c:03:d4:42:6c:4f:
3b:76:95:0a:f7:1d:68:69:36:87:0a:7d:d7:3a:b1:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:AE:82:36:73:E3:1F:BD:67:4E:51:7C:04:AF:05:5E:25:EE:2C
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bc:0f:ce:94:32:d9:5b:16:ce:57:33:1b:09:18:ea:d5:3c:
ad:81:3f:ec:00:5f:87:e3:f6:11:74:b9:c9:da:ca:87:f1:e3:
07:2f:e4:ad:d8:13:b5:00:70:60:6e:31:f9:e8:d3:55:31:2f:
4c:b6:8d:c1:13:37:2b:51:7a:78:4e:3b:6a:15:47:eb:41:29:
3e:1a:7d:b9:da:57:a0:5e:79:ef:29:c7:63:5a:cf:3b:cf:13:
0c:06:73:eb:a5:07:94:44:0a:d8:eb:72:d0:bb:d5:8f:e0:9c:
ab:18:c7:f6:bb:fb:85:d0:ac:b5:b9:c0:3f:55:c6:38:aa:4c:
00:d8:10:84:55:fb:d7:54:0e:fa:8c:3a:64:bd:45:d9:53:03:
81:8d:d8:a4:41:51:15:a3:27:45:70:2b:72:8b:23:13:77:97:
de:e7:89:41:a5:3a:0c:81:18:a7:db:e0:a6:6e:75:b8:b0:31:
0e:58:a3:96:e3:17:fe:e7:f3:cb:f3:ed:a3:41:36:dd:02:a6:
f0:8a:f8:ad:ea:66:cf:9c:81:18:61:6c:68:aa:5b:51:14:3b:
6c:c4:b6:bf:20:14:13:81:b8:91:e8:73:11:c4:02:12:2a:e1:
61:41:f0:da:92:64:bb:59:13:f0:0a:3f:f4:cd:88:de:3b:48:
3f:99:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:09:47 2025 by rpki-client